Inter-VLAN Routing
Course Objectives
After completing this course, you will be able to:
• Understand the inter-VLAN communication mechanism.
• Implement inter-VLAN routing through sub-interfaces.
• Understand the working mechanism of Layer 3 switches.
• Implement inter-VLAN routing through VLANIF interfaces.
Contents
Inter-VLAN Routing Through Sub-interfaces
Inter-VLAN Routing Through VLANIF interfaces
Background
• A VLAN is a broadcast domain. Devices in the same VLAN can directly
communicate at Layer 2, while devices in different VLANs cannot directly
communicate. To allow devices in different VLANs to communicate, a Layer 3
routing device, such as a router or Layer 3 switch is needed.
Layer 2 communication
PC1 (VLAN10) PC2 (VLAN10) PC3 (VLAN20) PC4 (VLAN20)
[Link]/24 [Link]/24 [Link]/24 [Link]/24
VLAN10 VLAN20
Communication fails.
Inter-VLAN Routing Through a Router
Router
GE0/0/1 GE0/0/2
• The easiest way to implement inter-
[Link] [Link] VLAN communication is using a
router.
GE0/0/23
• In this example, the router uses one
GE0/0/24
physical interface to serve one VLAN.
G
E0
/1
/0 • The SW's GE 0/0/23 and GE 0/0/24
/0
/2
E0
G
SW
must be configured as access
interfaces, and each be added to a
specific VLAN.
PC1(VLAN 10) PC2(VLAN 20) • This method is easy to configure, but
[Link]/24 [Link]/24 has low scalability.
Gateway:[Link] Gateway:[Link]
Inter-VLAN Routing Through Sub-interfaces
Router
GE0/0/1
GE0/0/1.10 GE0/0/1.20 • In this example, the router has more
[Link] [Link] than one sub-interface configured
for a physical interface, with one sub-
GE0/0/24 interface serving one VLAN.
(Trunk interface)
• A sub-interface is a software-based,
GE
/1
E 0/
0 0/
0/
2
logical interface. It is easy to add and
G
SW maintain sub-interfaces.
• The SW's GE 0/0/24 must be
configured as a trunk interface to
PC1(VLAN 10) PC2(VLAN 20)
carry traffic from multiple VLANs.
[Link]/24 [Link]/24
Gateway:[Link] Gateway:[Link]
Creating Sub-interfaces on a Router’s Physical Interface
Interface GigabitEthernet 0/0/0.10
dot1q termination vid 10
ip address [Link] 24
arp broadcast enable
Switch Router
VLAN10
GE0/0/1
PC1
Trunk GE0/0/0
GE0/0/2
VLAN20
PC2
Interface GigabitEthernet 0/0/0.20
dot1q termination vid 20
ip address [Link] 24
arp broadcast enable
Creating Sub-interfaces on a Firewall’s Physical Interface
GE0/0/1
G0/0/1
GE0/0/1.10
GE0/0/1.20
G0/0/1 Trunk
GE0/0/1.10 GE0/0/1.20
vlan-type dot1q 10 vlan-type dot1q 20
ip address [Link] 24 ip address [Link] 24
VLAN 10 VLAN 20
Trust DMZ
Contents
Inter-VLAN Routing Through Sub-interfaces
Inter-VLAN Routing Through VLANIF interfaces
VLANIF Interface
Layer 3 switch
Router module interface vlanif 10
vlanif10 Vlanif20
interface vlanif 20
Switching module
10 10 20 20
VLAN 10 VLAN 20
Basic Configurations of VLANIF Interfaces
SW
G0/0/1 G0/0/2
PC1(VLAN 10) PC2(VLAN 20)
[Link]/24 [Link]/24
Gateway:[Link] Gateway:[Link]
• PC1 belongs to VLAN10, and PC2 belongs to VLAN20.
• Configure the Layer 3 switch to allow PC1 and PC2 to communicate.
Basic Configurations of VLANIF Interfaces
• Configure the SW.
# Create VLANs 10 and 20. Add GE 0/0/1 to VLAN 10 and GE 0/0/2 to VLAN 20.
[SW] vlan batch 10 20
[SW] interface GigabitEthernet 0/0/1
[SW-GigabitEthernet0/0/1] port link-type access
[SW-GigabitEthernet0/0/1] port default vlan 10
[SW] interface GigabitEthernet 0/0/2
[SW-GigabitEthernet0/0/2] port link-type access
[SW-GigabitEthernet0/0/2] port default vlan 20
Basic Configurations of VLANIF Interfaces
• Configure the SW.
# Assign an IP address to VLANIF 10 and VLANIF 20 so that they can serve as the gateways for
VLANs 10 and 20.
[SW] interface vlanif 10
[SW-vlanif10] ip address [Link] 24
[SW] interface vlanif 20
[SW-vlanif20] ip address [Link] 24
Networking with Layers 2 and 3 Switches and a Router
GE0/0/0
[Link]/24 Router
GE0/0/24
SW2 vlanif 10 [Link]/24
vlanif 20 [Link]/24
GE0/0/22 vlanif 99 [Link]/24
GE0/0/22 • PC1 belongs to VLAN10 and PC2 belongs to
VLAN20. The gateways for the VLANs reside on
GE0/0/1 GE0/0/2
the core switch SW2.
SW1
• SW2 communicates with the router through
VLAN99.
• It is required that PC1 and PC2 be able to
PC1(VLAN 10) PC2(VLAN 20) communicate with each other and successfully ping
[Link]/24 [Link]/24
Gateway:[Link] Gateway:[Link] the router.
Logical Diagram
Layer 3 switch
Vlanif 10 Vlanif 20 Vlanif 99
GE0/0/22 GE0/0/24
T 99
Tr
Layer 2 switch
u
nk
GE0/0/1 GE0/0/2 GE0/0/22
10 20 T
T Trunk interface
10 20 99 Access interface
[Link]/24 [Link]/24
GW:[Link] GW:[Link]
Configuration Example for Networking with Layers 2 and 3 Switches and a Router
• # Configure SW1.
[SW1] vlan batch 10 20
[SW1] interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1] port link-type access
[SW1-GigabitEthernet0/0/1] port default vlan 10
[SW1] interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2] port link-type access
[SW1-GigabitEthernet0/0/2] port default vlan 20
[SW1] interface GigabitEthernet 0/0/22
[SW1-GigabitEthernet0/0/22] port link-type trunk
[SW1-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20
Configuration Example for Networking with Layers 2 and 3 Switches and a Router
• # Configure SW2.
[SW2] vlan batch 10 20 99
[SW2] interface GigabitEthernet 0/0/22
[SW2-GigabitEthernet0/0/22] port link-type trunk
[SW2-GigabitEthernet0/0/22] port trunk allow-pass vlan 10 20
# Configure GE 0/0/24 that connects to the router.
[SW2] interface GigabitEthernet 0/0/24
[SW2-GigabitEthernet0/0/24] port link-type access
[SW2-GigabitEthernet0/0/24] port default vlan 99(continued)
Configuration Example for Networking with Layers 2 and 3 Switches and a Router
• # Configure SW2.
[SW2] interface vlanif 10
[SW2-vlanif10] ip address [Link] 24
[SW2] interface vlanif 20
[SW2-vlanif20] ip address [Link] 24
[SW2] interface vlanif 99
[SW2-vlanif99] ip address [Link] 24
# Configure a default route destined for SW2, with the next hop being the router.
[SW2] ip route-static [Link] [Link] [Link]
Configuration Example for Networking with Layers 2 and 3 Switches and a Router
• # Configure the router.
[Router] interface GigabitEthernet 0/0/0
[Router-GigabitEthernet0/0/0] ip address [Link] 24
# Configure static routes destined for the network segments of VLANs 10 and 20
respectively for the return traffic.
[Router] ip route-static [Link] 24 [Link]
[Router] ip route-static [Link] 24 [Link]
